Ordi ultra lent au démarrage

Fermé
danydu77 - 12 sept. 2010 à 13:42
 danydu77 - 12 sept. 2010 à 19:17
Bonjour,
Mon ordi met quasiment 20 minutes a s'ouvrir (il reste bloqué sur le logo windows) et des fois il ne s'allume pas du tout !
Voici un rapport avec ZHPDiag.
Merci de m'aider :)


Rapport de ZHPDiag v1.26.62 par Nicolas Coolman, Update du 11/09/2010
Run by Dany at 12/09/2010 13:26:48
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.7600.16385

---\\ System Information
Platform : Windows Se7en Titan (6.1.7600)
Processor: x86 Family 6 Model 15 Stepping 11, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3071 MB (58% free)
System drive C: has 31 GB (33%) free of 93 GB

---\\ Logged in mode
Computer Name: DANY-PC
User Name: Dany
All Users Names: Dany, Administrateur,
Unselected Option: O1,O45,O61,O65,O82
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 31 Go of 93 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 62 Go of 368 Go)
E:\ CD-ROM drive (Free 0 Go of 2 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
G:\ CD-ROM drive (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 1 Go)
I:\ CD-ROM drive (Not Inserted)
N:\ CD-ROM drive (Not Inserted)


---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK


---\\ Processus lancés
[MD5.E0D6538B62C79FCBF0B27F95FAF3208B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [246504]
[MD5.D73B38AE415ED63BD89946D71D14B482] - (.ESET - ESET GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2054360]
[MD5.869A67EE7C237DD9F9104854CAE0A9CD] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [141608]
[MD5.C1D69480BB0C11BA8DEF163182D445C6] - (.Google Inc. - Google Chrome.) -- C:\Users\Dany\AppData\Local\Google\Chrome\Application\chrome.exe [945720]
[MD5.603DC84F2AD944ABB10958F5BFED7149] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [654616]
[MD5.BB37C6996ADFE06CF424E9CFE1C4C0BF] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\PROGRA~1\Java\jre6\bin\jp2launcher.exe [23328]
[MD5.AD3A2226B72F6E161425254276670117] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\java.exe [145184]
[MD5.3308C99DC550B05B23CF943301E63745] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [554496]
[MD5.D594EA4AC1C0E4675EF2F0063950ABEF] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [1090952]


---\\ Page de démarrage du navigateur Opera (B0)
B0 - SPO: operaprefs.ini [Dany] Home URL=https://www.google.fr/?gws_rd=ssl


---\\ Pages de recherche de Mozilla Firefox (M1)
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com


---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeploytk.dll
P2 - FPN:Firefox Plugin Navigator . (.Pando Networks - Pando Web Installer.) -- C:\Program Files\Mozilla Firefox\Plugins\npPandoWebInst.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@gamersfirst.com/LiveLauncher] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll (.not file.)
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50524.0.) -- C:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.dll
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.dll
P2 - FPN: [HKLM] [@ogplanet.com/npOGPPlugin] - (.OGPlanet - OGPlanet Game Plugin.) -- C:\Windows\system32\npOGPPlugin.dll
P2 - FPN: [HKLM] [@pages.tvunetworks.com/WebPlayer] - (.TVU networks - 2,5,3,1.) -- C:\Program Files\TVUPlayer\npTVUAx.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.0.5] - (.the VideoLAN Team - Version 1.0.5, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Users\Dany\AppData\Local\Google\Update\1.2.183.29\npGoogleOneClick8.dll


---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe


---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp


---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local


---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Audacity-tools Toolbar - {d0b1518e-3e45-4d16-a23b-4d90ef938e44} . (.Conduit Ltd. - Conduit Toolbar.) (5, 6, 0, 23) -- C:\Program Files\Audacity-tools\tbAuda.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {d0b1518e-3e45-4d16-a23b-4d90ef938e44} . (.Conduit Ltd. - Conduit Toolbar.) (5, 6, 0, 23) -- C:\Program Files\Audacity-tools\tbAuda.dll


---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Audacity-tools Toolbar - {d0b1518e-3e45-4d16-a23b-4d90ef938e44} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Audacity-tools\tbAuda.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll


---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} . (.Pas de propriétaire - ToolBand Module.) -- C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Audacity-tools Toolbar - {d0b1518e-3e45-4d16-a23b-4d90ef938e44} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Audacity-tools\tbAuda.dll
O3 - Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} . (.Pas de propriétaire - Pas de description.) -- (.not file.)


---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [egui] . (.ESET - ESET GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Dany\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-18\..\Run: [Welcome Center] . (.Microsoft Corporation - Mise en route.) -- C:\Windows\system32\OobeFldr.dll
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-18\..\Run: [Welcome Center] . (.Microsoft Corporation - Mise en route.) -- C:\Windows\system32\OobeFldr.dll
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-2085388031-2869591019-1433149866-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Dany\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-2085388031-2869591019-1433149866-1001\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: &Envoyer à OneNote . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.exe


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll
O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MIF5BA~1\Office14\ONBTTN~1.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} . (.Apple Inc. - Bonjour Resource Module.) -- C:\Program Files\Bonjour\ExplorerPlugin.Resources\ExplorerPluginResources.dll


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll


---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} () - http://fichiers.touslesdrivers.com/maconfig/MaConfig_4_2_1_0.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldfr-fr.cab


---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{F83F7A4B-9341-45C3-8C4D-A09686264A5C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F83F7A4B-9341-45C3-8C4D-A09686264A5C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{F83F7A4B-9341-45C3-8C4D-A09686264A5C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {E31004D1-A431-41B8-826F-E902F9D95C81} . (.Microsoft Corporation - Microsoft Windows 7 Ultimate Extra: Windows.) -- C:\Windows\System32\DreamScene.dll


---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater (Application Updater) . (.Spigot, Inc. - Application Updater.) - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) . (.WDC - WD Drive Manager Service.) - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) . (.Memeo - WDSmartWareBackgroundService.) - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe


---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)


---\\ Redirection du fichier Hosts (O1)
O1 - Hosts: 35154 pes09pcgate-e.winning-eleven.net
O1 - Hosts: 16354165.154165+ pes2009web.winning-eleven.net
O1 - Hosts: stun.xten.com pes7stun-e.winning-eleven.net


---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2085388031-2869591019-1433149866-1001Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2085388031-2869591019-1433149866-1001UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A}.job


---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: (no name) - {0HX56AFE-08FL-Q7DY-78WP-6ASAFGYN31P7} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WindowsUpdate\Svch0st.exe
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\Windows\system32\Macromed\Flash\Flash10h.ocx


---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: ehdrv (ehdrv) . (.ESET - ESET Helper driver.) - C:\Windows\system32\DRIVERS\ehdrv.sys
O41 - Driver: ElbyCDIO Driver (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\Windows\system32\Drivers\ElbyCDIO.sys


---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.3.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
O42 - Logiciel: Air Video Server 2.2.5 - (.InMethod, s.r.o..) [HKLM] -- Air Video Server
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Audacity-tools Toolbar - (.Pas de propriétaire.) [HKLM] -- Audacity-tools Toolbar
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CamStudio 2.0 Fr - (.Pas de propriétaire.) [HKLM] -- CamStudio 2.0 Fr_is1
O42 - Logiciel: Camtasia Studio 7 - (.TechSmith Corporation.) [HKLM] -- {3D577B95-4EC1-4C3D-B6F6-FF3D3C7FF9B4}
O42 - Logiciel: CloneDVD2 - (.Elaborate Bytes.) [HKLM] -- CloneDVD2
O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU] -- CodeBlocks
O42 - Logiciel: Convert PDF To Image - (.Softinterface, Inc..) [HKLM] -- Convert PDF To Image_is1
O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
O42 - Logiciel: CopyTrans Suite désinstallation uniquement - (.Pas de propriétaire.) [HKLM] -- CopyTrans Suite
O42 - Logiciel: DAEMON Tools Toolbar - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Toolbar
O42 - Logiciel: Dealio Toolbar v4.0.2 - (.Spigot, Inc..) [HKLM] -- {C878CD69-85DB-426B-81A3-E71175AAEB91}
O42 - Logiciel: Diablo II - (.Pas de propriétaire.) [HKLM] -- Diablo II
O42 - Logiciel: DofusArena 2.29.0 - (.Ankama Games.) [HKLM] -- DofusArena 2.29.0
O42 - Logiciel: Empire Earth II - (.Sierra.) [HKLM] -- {DF315348-721C-40B8-BAE2-58C6C7D935A2}
O42 - Logiciel: FileZilla Client 3.2.4.1 - (.Pas de propriétaire.) [HKLM] -- FileZilla Client
O42 - Logiciel: Fraps - (.Pas de propriétaire.) [HKLM] -- Fraps
O42 - Logiciel: Free Video Converter V 2.9 - (.Koyote Soft.) [HKLM] -- Free Video Converter_is1
O42 - Logiciel: GamersFirst LIVE! - (.GamersFirst.) [HKLM] -- GamersFirst LIVE!
O42 - Logiciel: Gears of War - (.Pas de propriétaire.) [HKLM] -- Gears of War_is1
O42 - Logiciel: GetASFStream - (.Pas de propriétaire.) [HKLM] -- GetASFStream
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {8F04AE70-9C11-11DF-8F84-005056C00008}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Guitar Pro 5.0 - (.Arobas Music.) [HKLM] -- Guitar Pro 5_is1
O42 - Logiciel: Hamachi 1.0.1.1 - (.Pas de propriétaire.) [HKLM] -- Hamachi
O42 - Logiciel: HashCheck Shell Extension (x86-32) - (.Kai Liu.) [HKLM] -- HashCheck Shell Extension
O42 - Logiciel: I-Doser v4 - (.Pas de propriétaire.) [HKCU] -- I-Doser v4
O42 - Logiciel: ImgBurn 2.3.2.0 Fr - (.Pas de propriétaire.) [HKLM] -- {75ADEFA2-D4FF-4B37-9E93-4306E6AC176B}_is1
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
O42 - Logiciel: IsoBuster 2.8 - (.Smart Projects.) [HKLM] -- IsoBuster_is1
O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader
O42 - Logiciel: James Cameron's AVATAR(tm): THE GAME - (.Ubisoft.) [HKLM] -- {7E19B002-4CA3-4C9F-BA92-91D101B97219}
O42 - Logiciel: Java(TM) 6 Update 18 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Just Cause 2 - (.Pas de propriétaire.) [HKLM] -- Just Cause 2_is1
O42 - Logiciel: K-Lite Codec Pack 6.2.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: LiteralMath 2.5 - (.Pas de propriétaire.) [HKLM] -- LiteralMath_is1
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Logitech Touch Mouse Server 1.0 - (.Logitech Inc..) [HKLM] -- Logitech Touch Mouse Server
O42 - Logiciel: Lost Saga - (.IO Entertainment Co., Ltd..) [HKLM] -- LostSagaUS
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM] -- {F97E3841-CA9D-4964-9D64-26066241D26F}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {8FB1B528-E260-451E-9B55-E9152F94B80B}
O42 - Logiciel: Microsoft Halo - (.Microsoft.) [HKLM] -- Halo
O42 - Logiciel: Microsoft Halo Trial - (.Microsoft.) [HKLM] -- Halo Trial
O42 - Logiciel: Microsoft Office Access MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-00BA-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professionnel Plus 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PROPLUS
O42 - Logiciel: Microsoft Office Proof (Arabic) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2010 (Beta) - (.Microsoft Corporation.) [HKLM] -- {20140000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Multimedia Tools - Audacity - (.Pas de propriétaire.) [HKLM] -- Multimedia Tools - Audacity
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}
O42 - Logiciel: Neffy 1,3,29,0 - (.CDNetworks.) [HKLM] -- Neffy
O42 - Logiciel: Nvu 1.0 - (.Pas de propriétaire.) [HKLM] -- Nvu_is1
O42 - Logiciel: OGPlanet Game Launcher - (.OGPlanet, Inc..) [HKLM] -- OGPlanet Game Launcher US
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Paragon Partition Manager(TM) 11 Free Edition - (.Paragon Software.) [HKLM] -- {45F4941E-5E77-11DF-A71D-005056C00008}
O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre
O42 - Logiciel: Pro Evolution Soccer 2010 - (.KONAMI.) [HKLM] -- {283FFB23-8751-4B08-ACB8-5E0F8BCF7727}
O42 - Logiciel: Project64 1.6 - (.Project64.) [HKLM] -- {9559F7CA-5E34-4237-A2D9-D856464AD727}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {EB900AF8-CC61-4E15-871B-98D1EA3E8025}
O42 - Logiciel: Red Faction Guerrilla - (.Nom de votre société.) [HKLM] -- InstallShield_{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}
O42 - Logiciel: Red Faction Guerrilla - (.Nom de votre société.) [HKLM] -- {A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}
O42 - Logiciel: S4 League_EU - (.Pas de propriétaire.) [HKLM] -- {D96021A9-B290-4783-B019-0E4000DA84CE}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF}
O42 - Logiciel: Security Update for Microsoft Office 2010 File Validation - Beta (KB976133) - (.Microsoft.) [HKLM] -- {20140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{701D1499-1FE5-4E8E-9E09-562423116373}
O42 - Logiciel: Security Update for Microsoft Office 2010 File Validation - Beta (KB976133) - (.Microsoft.) [HKLM] -- {20140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{76CB26F9-C8AD-403B-8461-168B18C2FE31}
O42 - Logiciel: Security Update for Microsoft Office 2010 File Validation - Beta (KB976133) - (.Microsoft.) [HKLM] -- {20140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7CDAA76C-5DB2-431F-A921-14A106BD8FA3}
O42 - Logiciel: Sid Meier's Civilization 4 - (.Firaxis Games.) [HKCU] -- {CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}
O42 - Logiciel: Sid Meier's Civilization 4 - Beyond the Sword - (.Firaxis Games.) [HKCU] -- {32E4F0D2-C135-475E-A841-1D59A0D22989}
O42 - Logiciel: Skype(TM) 4.2 - (.Skype Technologies S.A..) [HKLM] -- {5C474A83-A45F-470C-9AC8-2BD1C251BF9A}
O42 - Logiciel: Studio 11 - (.Pinnacle Systems.) [HKLM] -- {110B1ADF-2EAE-4E8F-B501-D2A1E6D8ED9D}
O42 - Logiciel: TI Connect 1.6 - (.Texas Instruments Incorporated.) [HKLM] -- {A8B94669-8654-4126-BD28-D0D2412CDED6}
O42 - Logiciel: TVUPlayer 2.5.3.1 - (.TVU networks.) [HKLM] -- TVUPlayer
O42 - Logiciel: TiLP2 1.14 - (.The TiLP Team.) [HKLM] -- TiLP2_is1
O42 - Logiciel: TmNationsForever Update 2010-03-15 - (.Nadeo.) [HKLM] -- TmNationsForever_is1
O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM] -- {888F1505-C2B3-4FDE-835D-36353EBD4754}
O42 - Logiciel: Ubuntu - (.Ubuntu.) [HKLM] -- Wubi
O42 - Logiciel: Unreal Tournament 2004 - (.Pas de propriétaire.) [HKLM] -- UT2004
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player
O42 - Logiciel: VideoTheque - (.Pas de propriétaire.) [HKCU] -- EASYVIDEOSOFT
O42 - Logiciel: WD SmartWare - (.Western Digital.) [HKLM] -- {CD0DC280-2489-4464-A2FC-16104676394A}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
O42 - Logiciel: Windows Movie Maker 2.6 - (.Microsoft Corporation.) [HKLM] -- {B3DAF54F-DB25-4586-9EF1-96D24BB14088}
O42 - Logiciel: Wysigot - (.Wysigot.) [HKLM] -- Wysigot_is1
O42 - Logiciel: Yahoo! Desktop Login - (.Pinnacle Systems.) [HKLM] -- {F9AEEC34-CF00-4CBD-9E36-DF9DC4002685}
O42 - Logiciel: e-Carte Bleue La Banque Postale - (.Pas de propriétaire.) [HKLM] -- {11B0F8D4-FD80-4800-ABA8-50D28FF769AF}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {91F7F3F3-CE80-48C3-8327-7D24A0A5716A}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
O42 - Logiciel: scrabbleproB 1.1.2 - (.scrabblepro.) [HKLM] -- scrabbleproB_is1
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\5DR8ZAD8GX]
[HKCU\Software\7-Zip]
[HKCU\Software\ASFRecorder]
[HKCU\Software\Activision]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AhnLab]
[HKCU\Software\Alliance MCA]
[HKCU\Software\Antimalware Doctor Inc]
[HKCU\Software\AppDataLow\Software\Audacity-tools]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Dealio]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Battle.net]
[HKCU\Software\BitTorrent]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\Bugsplat]
[HKCU\Software\Burda]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\DT Soft]
[HKCU\Software\DivX]
[HKCU\Software\ESET]
[HKCU\Software\EasyVideoSoft]
[HKCU\Software\Elaborate Bytes]
[HKCU\Software\Firaxis Games]
[HKCU\Software\Fraps3]
[HKCU\Software\Fucked]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GameSpy]
[HKCU\Software\GamersFirst]
[HKCU\Software\GetASFStreaml]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IGA]
[HKCU\Software\IM Providers]
[HKCU\Software\ImgBurn]
[HKCU\Software\InMethod]
[HKCU\Software\JRMX9X1GML]
[HKCU\Software\JaboSoft]
[HKCU\Software\JavaSoft]
[HKCU\Software\JustCause2]
[HKCU\Software\LAMBERT Jérôme]
[HKCU\Software\LDI Software]
[HKCU\Software\LiteralMath]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LostSagaUS]
[HKCU\Software\LowRegistry]
[HKCU\Software\MONOGRAM]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Consumer)]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Memeo]
[HKCU\Software\MouseIndustries]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\MyPlayer2]
[HKCU\Software\MyPlayer]
[HKCU\Software\N64 Emulation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Nival Online]
[HKCU\Software\ODBC]
[HKCU\Software\OGPlanet]
[HKCU\Software\OpenAutomate]
[HKCU\Software\Opera Software]
[HKCU\Software\PC SOFT]
[HKCU\Software\Patchou]
[HKCU\Software\PdaNetIPhone]
[HKCU\Software\Pinnacle Systems]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RAR Password Cracker]
[HKCU\Software\RLZer]
[HKCU\Software\RocketDock]
[HKCU\Software\SP2ClientUS]
[HKCU\Software\SP2Client]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\SimonTatham]
[HKCU\Software\Skype]
[HKCU\Software\Smart Projects]
[HKCU\Software\TG0PTF86JH]
[HKCU\Software\TVU networks]
[HKCU\Software\TeamViewer]
[HKCU\Software\TechSmith]
[HKCU\Software\Texas Instruments]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VOB]
[HKCU\Software\Valve]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\ZjSoft]
[HKCU\Software\ej-technologies]
[HKCU\Software\madFlac]
[HKCU\Software\mehDiZsoft]
[HKCU\Software\neowiz]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Acorn]
[HKLM\Software\Act-3D]
[HKLM\Software\Activision]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\Ankama]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Application Updater]
[HKLM\Software\Applied Networking]
[HKLM\Software\Arobas Music]
[HKLM\Software\Audacity-tools]
[HKLM\Software\Audible]
[HKLM\Software\BORLAND]
[HKLM\Software\Battle.net]
[HKLM\Software\Blizzard Entertainment]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDNetworks]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Conduit]
[HKLM\Software\DT Soft]
[HKLM\Software\DVC150]
[HKLM\Software\Dealio]
[HKLM\Software\DivX]
[HKLM\Software\DownloadHelper]
[HKLM\Software\ESET]
[HKLM\Software\Elaborate Bytes]
[HKLM\Software\FileZilla 3]
[HKLM\Software\Firaxis Games]
[HKLM\Software\GEAR Software]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\GamersFirst]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\KONAMI]
[HKLM\Software\LPG Shared]
[HKLM\Software\LiteralMath]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MidasHeurScanner]
[HKLM\Software\MovieBox USB]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NSIS_Sleepy]
[HKLM\Software\Nero]
[HKLM\Software\ODBC]
[HKLM\Software\Patchou]
[HKLM\Software\Pegasus Imaging]
[HKLM\Software\PegasusImaging]
[HKLM\Software\Pinnacle Systems]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Rohos]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Sierra]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\TVU networks]
[HKLM\Software\TeamViewer]
[HKLM\Software\TechSmith]
[HKLM\Software\Texas Instruments]
[HKLM\Software\Trad-FR]
[HKLM\Software\Trolltech]
[HKLM\Software\Ubisoft]
[HKLM\Software\Uniblue]
[HKLM\Software\Unreal Technology]
[HKLM\Software\Valve]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\Western Digital]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows]
[HKLM\Software\e-Carte Bleue La Banque Postale]
[HKLM\Software\mozilla.org]
[HKLM\Software\tpfmon]
[HKLM\Software\vLite]


---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\7-Zip
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\AGEIA Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\AirVideoServer
O43 - CFD:Common File Directory ----D- C:\Program Files\alaplaya
O43 - CFD:Common File Directory ----D- C:\Program Files\Alliance MCA
O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
O43 - CFD:Common File Directory ----D- C:\Program Files\Application Updater
O43 - CFD:Common File Directory ----D- C:\Program Files\Apprentice
O43 - CFD:Common File Directory ----D- C:\Program Files\Audacity-tools
O43 - CFD:Common File Directory ----D- C:\Program Files\BitDefender
O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour
O43 - CFD:Common File Directory ----D- C:\Program Files\CamStudio
O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
O43 - CFD:Common File Directory ----D- C:\Program Files\CodeBlocks
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
O43 - CFD:Common File Directory ----D- C:\Program Files\Conduit
O43 - CFD:Common File Directory ----D- C:\Program Files\ConvertHelper
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Lite
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\Dealio Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\DofusArena
O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\e-Carte Bleue La Banque Postale
O43 - CFD:Common File Directory ----D- C:\Program Files\Elaborate Bytes
O43 - CFD:Common File Directory ----D- C:\Program Files\ESET
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\FileZilla FTP Client
O43 - CFD:Common File Directory ----D- C:\Program Files\Free Video Converter
O43 - CFD:Common File Directory ----D- C:\Program Files\GamersFirst
O43 - CFD:Common File Directory ----D- C:\Program Files\GetASFStream
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory ----D- C:\Program Files\Hamachi
O43 - CFD:Common File Directory ----D- C:\Program Files\IDoser v4
O43 - CFD:Common File Directory ----D- C:\Program Files\IKEA HomePlanner
O43 - CFD:Common File Directory ----D- C:\Program Files\ImgBurn
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\iPod
O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD:Common File Directory ----D- C:\Program Files\LiteralMath
O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech Touch Mouse Server
O43 - CFD:Common File Directory ----D- C:\Program Files\Magic Workstation
O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Analysis Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games for Windows - LIVE
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Synchronization Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker 2.6
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\MultimediaTools
O43 - CFD:Common File Directory ----D- C:\Program Files\NaturalSoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Neffy
O43 - CFD:Common File Directory ----D- C:\Program Files\Nero
O43 - CFD:Common File Directory ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD:Common File Directory ----D- C:\Program Files\Nvu
O43 - CFD:Common File Directory ----D- C:\Program Files\OGPlanet
O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD:Common File Directory ----D- C:\Program Files\Opera
O43 - CFD:Common File Directory ----D- C:\Program Files\Pando Networks
O43 - CFD:Common File Directory ----D- C:\Program Files\Paragon Software
O43 - CFD:Common File Directory ----D- C:\Program Files\PhotoFiltre
O43 - CFD:Common File Directory ----D- C:\Program Files\Pinnacle
O43 - CFD:Common File Directory ----D- C:\Program Files\Project64 1.6
O43 - CFD:Common File Directory ----D- C:\Program Files\QS
O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\RocketDock
O43 - CFD:Common File Directory ----D- C:\Program Files\Safari
O43 - CFD:Common File Directory ----D- C:\Program Files\scrabbleproB1.1
O43 - CFD:Common File Directory R---D- C:\Program Files\Skype
O43 - CFD:Common File Directory ----D- C:\Program Files\Smart Projects
O43 - CFD:Common File Directory ----D- C:\Program Files\Softinterface, Inc
O43 - CFD:Common File Directory ----D- C:\Program Files\TechSmith
O43 - CFD:Common File Directory ----D- C:\Program Files\TI Education
O43 - CFD:Common File Directory ----D- C:\Program Files\TiLP
O43 - CFD:Common File Directory ----D- C:\Program Files\TVUPlayer
O43 - CFD:Common File Directory ----D- C:\Program Files\Ubisoft
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
O43 - CFD:Common File Directory ----D- C:\Program Files\Western Digital
O43 - CFD:Common File Directory ----D- C:\Program Files\WinAVI MP4 Converter
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Journal
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Portable Devices
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
O43 - CFD:Common File Directory ----D- C:\Program Files\WindowsUpdate
O43 - CFD:Common File Directory ----D- C:\Program Files\WindSolutions
O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
O43 - CFD:Common File Directory ----D- C:\Program Files\Wysigot
O43 - CFD:Common File Directory --H-D- C:\Program Files\Zero G Registry
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Apple
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\BitDefender
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LPG Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Nero
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Steam
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\TechSmith Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\TI Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Yahoo!
O43 - CFD:Common File Directory ----D- C:\ProgramData\Adobe
O43 - CFD:Common File Directory ----D- C:\ProgramData\Apple
O43 - CFD:Common File Directory ----D- C:\ProgramData\Apple Computer
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Application Data
O43 - CFD:Common File Directory ----D- C:\ProgramData\BitDefender
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Bureau
O43 - CFD:Common File Directory ----D- C:\ProgramData\DAEMON Tools Lite
O43 - CFD:Common File Directory ----D- C:\ProgramData\DAEMON Tools Pro
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Desktop
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Documents
O43 - CFD:Common File Directory ----D- C:\ProgramData\ESET
O43 - CFD:Common File Directory ----D- C:\ProgramData\explauncher
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favoris
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favorites
O43 - CFD:Common File Directory ----D- C:\ProgramData\Hewlett-Packard
O43 - CFD:Common File Directory ----D- C:\ProgramData\KONAMI
O43 - CFD:Common File Directory ----D- C:\ProgramData\launcher
O43 - CFD:Common File Directory ----D- C:\ProgramData\Malwarebytes
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD:Common File Directory ----D- C:\ProgramData\Messenger Plus!
O43 - CFD:Common File Directory -S--D- C:\ProgramData\Microsoft
O43 - CFD:Common File Directory ----D- C:\ProgramData\Microsoft Help
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Modèles
O43 - CFD:Common File Directory ----D- C:\ProgramData\Nero
O43 - CFD:Common File Directory ----D- C:\ProgramData\Pinnacle
O43 - CFD:Common File Directory ----D- C:\ProgramData\Pinnacle Studio
O43 - CFD:Common File Directory ----D- C:\ProgramData\redistpart
O43 - CFD:Common File Directory ----D- C:\ProgramData\Skype
O43 - CFD:Common File Directory ----D- C:\ProgramData\Solidshield
O43 - CFD:Common File Directory ----D- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Start Menu
O43 - CFD:Common File Directory ----D- C:\ProgramData\Sun
O43 - CFD:Common File Directory ----D- C:\ProgramData\TechSmith
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Templates
O43 - CFD:Common File Directory ----D- C:\ProgramData\THQ
O43 - CFD:Common File Directory ----D- C:\ProgramData\tpfmon
O43 - CFD:Common File Directory ----D- C:\ProgramData\TrackMania
O43 - CFD:Common File Directory ----D- C:\ProgramData\TVU Networks
O43 - CFD:Common File Directory ----D- C:\ProgramData\Ubisoft
O43 - CFD:Common File Directory ----D- C:\ProgramData\Western Digital
O43 - CFD:Common File Directory ----D- C:\ProgramData\WindSolutions
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Apple
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\BitDefender
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LPG Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Nero
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Steam
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\TechSmith Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\TI Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Yahoo!


---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.7E48EE844734717829787955A2C9D23A] - 12/09/2010 - 12:23:27 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [17168]
O44 - LFC:[MD5.7E48EE844734717829787955A2C9D23A] - 12/09/2010 - 12:23:27 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [17168]
O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 12/09/2010 - 12:23:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224]
O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 12/09/2010 - 12:23:16 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952]
O44 - LFC:[MD5.00000000000000000000000000000000] - 12/09/2010 - 12:20:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1227201]
O44 - LFC:[MD5.5A58E7DD5FD67B8EB7FDD8E9393AE62D] - 12/09/2010 - 12:14:39 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.280782DEEC3BAA2ECC84893DD1A96843] - 26/08/2010 - 02:58:59 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [382424]
O44 - LFC:[MD5.48ED16C0C98C950843E673EEEE02AC94] - 25/08/2010 - 15:08:45 ---A- . (.Paragon Software Group - A part of Paragon System Utilities.) -- C:\Windows\System32\drivers\hotcore3.sys [40560]
O44 - LFC:[MD5.680545C984D375E03C7290141CD1E2FF] - 25/08/2010 - 14:46:17 ---A- . (.Uwe Sieber - www.uwe-sieber.de - DriveCleanup (Win32) - removes non present.) -- C:\Windows\System32\DriveCleanup.exe [19456]
O44 - LFC:[MD5.0AF7946AD9B2E82058C6421EEC960FCF] - 25/08/2010 - 14:34:13 ---A- . (.Intel(R) Corporation - Pas de description.) -- C:\Windows\System32\ir32_32.dll [197632]
O44 - LFC:[MD5.17A4BE67FB6B9219A802F39C263AC8AC] - 25/08/2010 - 14:34:13 ---A- . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll [82944]


---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL


---\\ MountPoints2 Shell Key (MPSK) (O51)
O51 - MPSK:{028d80bc-5ab5-11df-a09c-00158315a310}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- N:\SETUP.EXE (.not file.)
O51 - MPSK:{f036960c-33eb-11df-a41e-0019665e77cd}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- "L:\WD SmartWare.exe" autoplay=true (.not file.)


---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.MJPG"="pvmjpg30.dll" . (.Pegasus Imaging Corporation - PICVideo M-JPEG 3 codec.) -- C:\Windows\System32\pvmjpg30.dll
O52 - TDSD: \Drivers32\"vidc.tscc"="tsccvid.dll" . (.TechSmith Corporation - TechSmith Screen Capture Codec.) -- C:\Windows\System32\tsccvid.dll
O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsvid.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsvid.dll
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"vdrcodec.dll"="Pinnacle Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"tsccvid.dll"="TechSmith Screen Capture Codec" . (.TechSmith Corporation - TechSmith Screen Capture Codec.) -- C:\Windows\System32\tscc
A voir également:

4 réponses

buckhulk Messages postés 13690 Date d'inscription dimanche 21 septembre 2008 Statut Contributeur Dernière intervention 14 novembre 2020 1 757
12 sept. 2010 à 18:07
bon , pas mal de boulot , mais rien d'irréparable !!!

donc déjà tu commence par AD-Remover
AD-Remover (de C_XX)


A. Télécharges AD-Remover sur ton Bureau.
Déconnecte toi et ferme toutes les applications en cours
(Le meilleur moyen est de débrancher le câble Ethernet) n'oublie pas de le rebrancher après !!!

Pour permettre à AD-Remover de s'exécuter correctement sous Vista, il est nécessaire de désactiver le contrôle des comptes utilisateurs (UAC)
Pour cela, suivez le tutoriel approprié à votre système d'exploitation :
Vista et Windows7

Installation :
1. Rends toi à cette adresse afin de télécharger AD-Remover (créé par C_XX) :
2. AD-Remover
3. Cliques sur TELECHARGER et enregistrez-le sur votre bureau.
4. Une fois téléchargé sur votre bureau, double-cliques sur son icône pour lancer l'installation.
5. Sous vista et Windows7 : clic droit sur son icône et sélectionnez "Exécuter en tant qu'administrateur".
6. L'installation se fera automatiquement

Option recherche :
1. Une fois l'installation automatique terminée, la fenêtre de AD-Remover apparaitra.
2. Cliques sur Scanner pour exécuter une recherche des infections.
3. Cliques sur Oui dans la petite fenêtre qui apparaîtra pour confirmer ton action.
4. L'analyse est maintenant lancée, il vous faudra patienter un moment.
5. Cela peut aller vite, tout comme ça peut durer assez longtemps... Tout dépends de la taille de tes disques ainsi que les infections dans ton PC.
6. Une fois l'analyse terminée, le rapport de l'analyse apparaîtra.
7. Si tu te fais aider sur le forum d'entraide ou sur un autre forum, il suffit de copier/coller le contenu du rapport dans ta réponse.
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller)
8. Tu pourras ensuite cliquer sur Quitter pour fermer le programme.

1
Utilisateur anonyme
12 sept. 2010 à 18:19
STOP
Platform : Windows Se7en Titan (6.1.7600)
https://www.commentcamarche.net/faq/2981-j-utilise-une-version-piratee-de-windows
Je préviens la modération
1
buckhulk Messages postés 13690 Date d'inscription dimanche 21 septembre 2008 Statut Contributeur Dernière intervention 14 novembre 2020 1 757
12 sept. 2010 à 15:02
bonjour ,
il manque des lignes à ton rapport , utilise ci joint :
Ci-Joint

Pour héberger un rapport log assez long , genre ZHPDiag ou RSIT , ou autre , ouvrir

Ci-joint

ensuite

1. Cliquer sur rechercher
2. Choisir le rapport voulu dans votre ordinateur
3. Cliquer sur Cliquer ici pour déposer le fichier
4. Fournir le lien ainsi généré dans le prochain message
> > surligner le lien , le copier, puis le coller dans le message sur le forum .
0
Utilisateur anonyme
12 sept. 2010 à 15:09
Bonjour
Quelques infections visibles
[HKCU\Software\Antimalware Doctor Inc]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Dealio]
0
moment de grace Messages postés 29042 Date d'inscription samedi 6 décembre 2008 Statut Contributeur sécurité Dernière intervention 18 juillet 2013 2 274
12 sept. 2010 à 15:16
salut nat

laisse le agir et on regarde...
0
buckhulk Messages postés 13690 Date d'inscription dimanche 21 septembre 2008 Statut Contributeur Dernière intervention 14 novembre 2020 1 757
12 sept. 2010 à 15:35
oui les filles , mais j'ai pas tout >> alors ??
mais je prend vos conseils ;)
0
voila le rapport complet :
http://www.cijoint.fr/cjlink.php?file=cj201009/cijj9B8t5Z.txt
0
Jawaryinti meles toi de tes affaires !
Buckhulk merci de m'aider c'est sympa ^^
voila j'ai fais ce que tu m'a demandé, ça donne ça :



======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 06/09/10 à 15:20
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 19:13:24 le 12/09/2010, Mode normal

Microsoft Windows 7 Édition Intégrale (X86)
Dany@DANY-PC (To Be Filled By O.E.M. To Be Filled By O.E.M.)

============== RECHERCHE ==============

Service: "Application Updater" Présent

0,Fichier trouvé: C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
0,Dossier trouvé: C:\Program Files\Application Updater
0,Dossier trouvé: C:\Program Files\Conduit
0,Dossier trouvé: C:\Program Files\Dealio Toolbar
3,Fichier trouvé: C:\Windows\Installer\9744f.msi

1,Clé trouvée: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
1,Clé trouvée: HKLM\Software\Classes\Interface\{DB885111-F39F-4D88-9EE5-C88460B6DF7B}
0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT2643111
0,Clé trouvée: HKLM\Software\Application Updater
0,Clé trouvée: HKLM\Software\Conduit
0,Clé trouvée: HKLM\Software\Dealio
0,Clé trouvée: HKCU\Software\Conduit
0,Clé trouvée: HKCU\Software\AppDataLow\Software\Conduit
0,Clé trouvée: HKCU\Software\AppDataLow\Software\Dealio
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}

0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}


============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.7600.16385] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Show_ToolBar: yes
Start Page: hxxp://google.fr/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\System32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 12/09/2010 (2633 Octet(s))

Fin à: 19:15:02, 12/09/2010

============== E.O.F ==============
-2